Events Webhook

Tell us what events to send and where #

You can select which events to receive and where we should send them on the Cord Console. Log in to your project and go to the Events tab.

When you give us your Events Webhook endpoint, we will attempt to verify the URL before saving it to your project. You can also set your endpoint via REST API.

Verify incoming events #

To make sure that requests hitting your endpoint are really from Cord, verify the incoming request's signature using your project secret.

Use our helper function from the server sdk which will validate the signature and timestamp on the webhook requests.

Alternatively, you can perform the same verification in your own code. Each request has a X-Cord-Signature header set which you should be able to match with a signature you create from the incoming event, using a HMAC-SHA256 keyed hash and your project's secret.

import { validateWebhookSignature } from '@cord-sdk/server';

validateWebhookSignature(req, <YOUR_CORD_PROJECT_SIGNING_SECRET>);
// process event

import { validateWebhookSignature } from '@cord-sdk/server';

validateWebhookSignature(req, <YOUR_CORD_PROJECT_SIGNING_SECRET>);
// process event

Event Structure #

All events have the following common properties at the top level of the payload:

Events #

Detailed information about each available event and its specific body:

Type 

Description 

thread-message-added

A new Cord message was added

notification-created

A new Cord notification was created

url-verification

Verifies ownership of an events webhook URL